CVE-2026-65330

A PAC Bypass vulnerability exists in the XNU VFS component, specifically within the default_setxattr_doubleagent handler for the tmpfs filesystem. The root cause is the use of a fixed, compile-time constant PAC diversifier (#0x307a) when signing the xattr handler function pointer. An attacker wit...

CVE-2026-65330

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or corrupt kernel memory...

CVE-2026-65349

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65349

A vulnerability in the XNU VFS component, specifically within the vfs_attr_pack_internal function (used by the getattrlist syscall), allows an out-of-bounds write to a caller buffer. The root cause is a failure to verify that the output offset exceeds bufsize before writing attribute slot 51. Thi...

CVE-2026-65349

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2026-72027

A flaw was found in the Linux kernel's memory management subsystem, specifically within the mm/compaction component. When the freepagesprepare function fails, the compactionfree function does not properly handle this error. This oversight can lead to pages that are either hardware poisoned...

CVE-2026-72014

A flaw was found in DRBD, a component of the Linux kernel. A malicious or man-in-the-middle DRBD peer can send a specially crafted data reply with an out-of-range payload size. This incorrect size calculation can lead to an out-of-bounds write, allowing the attacker to copy arbitrary data past a...

CVE-2026-72292

A flaw was found in the kernel. A local user could exploit a vulnerability in the KVMS390GETCMMABITS ioctl, specifically within the kvms390getcmmabits function. This function allocates memory without properly initializing all pages, leading to uninitialized memory regions. These uninitialized...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100519)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100519 advisory. In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool-stack on AQ init failure otx2poolaqinit frees pool-stack...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100301 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset The kfdeventpageset function writes...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100187 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Add NULL check in udmaprobe devmkasprintf returns NULL when memory allocation fail...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099781 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: Fix use-after-free in pcibusreleasedomainnr Commit c14f7ccc9f5d PCI: Assign PCI domain IDs b...

The vulnerability in the `fs/smb/client/smb2file.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/smb/client/smb2file.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100496 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100695 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained fro...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099777 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/omfs: reject ssysblocksize smaller than OMFSDIRSTART omfsfillsuper rejects oversized...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099728)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099728 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qrtr: Fix an uninit variable access bug in qrtrtxresume Syzbot reported a bug as following:...

PT-2026-91512

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6.1 iPadOS versions prior to 26.6.1 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.6.2 tvOS versions prior to 27 visionOS versions prior to 27 watchOS versions prior to 27 Description An...

CVE-2026-65349: Out-of-bounds Read

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65330: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory...